CVE-2026-58116

Name of the Vulnerable Software and Affected Versions LLaMA-Factory versions prior to 0.9.6

Description Remote code execution is possible via the WebUI Chat and Training interfaces. The application fails to validate user-supplied model paths before passing them to the AutoTokenizer.from pretrained() and AutoModel.from pretrained() functions. Because the trust remote code parameter is hardcoded to True, the Hugging Face transformers library fetches and executes arbitrary Python code from a remote or local model repository using the privileges of the server process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.